Find deleted records by Sys_ID - Support and Troubleshooting

Find deleted records by Sys_ID There has been many times where you have been looking for a specific record and have the sys_id but cannot find any trace of it and want to check if it has been deleted.

This script will look for a sys_id in the usual places and provide you an update if it can be found.

Note: This script won't find all the deleted records, but it has been used a number of times already and been able to find where the deleted record is quickly and can determine when and who may have deleted it .

The script is below, simple as copying and pasting into your instance, populating the sys_id and if you know the table name and then running the script to find your deleted record.

// Find deleted records with sys_id // This script will look for your sys_id in tables: // sys_audit // sys_audit_delete // sys_rollback_sequence // Shadow table

// Enter in sys_id of the record // if you know table please populate table variable as well, otherwise leave as blank. var sys_id = '___sys_id___'; var tableName ='';

var instanceName = gs.getProperty('instance_name'); findDeletion();

function findDeletion() {

chk_audit_delete(); chk_rollback_seq(); chk_audit(); if(tableName != '') chk_shadow(); gs.print('End of Search');

}

function chk_audit_delete() { var chk = new GlideRecord('sys_audit_delete'); chk.addEncodedQuery("documentkey="+sys_id); chk.setLimit(1); chk.query();

if(chk.next()) gs.log("Found deleted record in sys_audit_delete: https://" + instanceName + ".service-now.com/sys_audit_delete_list.do?sysparm_query=documentkey%3D" +sys_id + "\n");

}

function chk_rollback_seq() { var chk = new GlideRecord('sys_rollback_sequence'); chk.addEncodedQuery("document_id="+sys_id); chk.setLimit(1); chk.query();

if(chk.next()) { gs.log("Found deleted record in sys_rollback_sequence: https://" + instanceName + ".service-now.com/sys_rollback_sequence_list.do?sysparm_query=document_id%3D" +sys_id + "\n"); gs.log("This was found to be related to rollback sequence:" + chk.context.getDisplayValue()) }

}

function chk_audit() { var chk = new GlideRecord('sys_audit'); chk.addEncodedQuery("documentkey="+sys_id+"^fieldname=DELETED"); chk.setLimit(1); chk.query();

if(chk.next()) gs.log("Found deleted record in sys_audit: https://" + instanceName + ".service-now.com/sys_audit_list.do?sysparm_query=documentkey%3D" +sys_id + "%5Efieldname%3DDELETED" + "\n");

}

function chk_shadow() { var tablechk = new GlideRecord('sys_storage_alias') tablechk.addEncodedQuery("table_name="+tableName); tablechk.setLimit(1); tablechk.query();

if(tablechk.next()) {

var chk = new GlideRecord('sh$'+tablechk.storage_table_name); chk.addEncodedQuery("sys_id="+sys_id); chk.setLimit(1); chk.query();

if(chk.next()) gs.log("Found deleted record in shadowtable: https://" + instanceName + ".service-now.com/sh$"+tablechk.storage_table_name+"_list.do?sysparm_query=sys_id%3D" +sys_id + "\n"); }

}